Solid Solutions en Identification SA Privacy Statement
This Privacy Statement describes the methods of processing Personal Data obtained by SOLID in the course of its business relations or via visitors to its various websites, including www.solid.ch, and the procedure for doing so. In addition, this Statement describes how SOLID ensures the security of Personal Data processed.
Although the RGPD is an EU regulation, it is relevant to SOLID for a number of reasons, not least the following: Swiss data protection legislation is historically closely linked to European regulations, the changes to be made to Swiss law in this area are strongly influenced by the RGPD, and finally the RGPD imposes high standards of personal data protection, standards that have extraterritorial reach (market access), in other words, companies based outside the EU are, in certain circumstances, bound by the provisions of this regulation.
Data collected
We always process your personal data for a specific purpose and only process the personal data relevant to achieving that purpose.
The data concerned includes personal information (e.g. name, address and other contact details, date and place of birth, nationality), identification data (e.g. identity card details) and authentication data (e.g. specimen signature). In addition, this may also include data arising from the performance of our contractual obligations, information concerning your financial situation (e.g. creditworthiness), marketing and sales data (e.g. events and competitions organized by SOLID), data contained in documents (e.g. meeting protocol), and other similar data.
Shelf life
Our retention periods for personal information are regularly reviewed. We will retain your personal information on our systems for as long as is necessary for the relevant activity, or as set out in any contract you have with us, or as required by applicable law.
Your rights
Applicable data protection legislation grants you certain rights with regard to the use of your personal data. These rights apply only in certain cases, and are subject to certain exceptions.
You have the right to request SOLID to rectify inaccurate personal data (see paragraph "modification of personal data") that we collect and process and the right to request the restriction of your personal data until such request is taken into consideration.
Where we process your personal data on the basis of your consent, you have the right to withdraw that consent at any time. Please note, however, that withdrawal of consent does not affect the lawfulness of processing based on consent prior to its withdrawal.
You have the right to ask us to stop processing your personal data or to request the deletion of your personal data - these rights are not absolute (as there may sometimes be overriding interests that require continued processing, for example legal requirements), but we will consider your request and confirm the decision taken.
Where we process your personal data on the basis of your consent, or where such processing is necessary to enter into or perform our obligations under a contract with you, you have the right under applicable data protection laws to request that your personal data be transferred to you or to another data controller. You also have the right to ask SOLID for a copy of all or part of the personal data we collect and process about you.
In certain circumstances, SOLID may process your personal data through an automated decision-making process, including profiling (this is particularly the case when processing applications and CVs). In certain circumstances, you may request not to be subject to automated decision-making, including profiling (GDPR art. 21 § 1-3).
You can exercise the rights set out above or request full information about your rights and how to exercise them by using the contact details at the top of this Declaration.
Security
We have put in place appropriate technical, physical and organizational measures to prevent unauthorized or unlawful access to the personal data you have provided to us. As complete data security cannot be guaranteed for communications by e-mail, instant messaging and similar means, we recommend that you send any particularly confidential information by another secure means.
When we provide personal information to a third party (including our service providers) or use a third party to collect personal data on our behalf, the third party is carefully selected and is required to implement appropriate security measures.
Due to the nature of our business, personal information may be transferred to entities based in other countries. When we make such transfers, we take the necessary steps to ensure that your personal data is properly protected and transferred in accordance with applicable data protection legislation.
Suppliers and subcontractors
The contractual relationship with the subcontractor is governed by written contracts and the data protection provisions of this Declaration have been passed on to the subcontractor. We regularly monitor the measures taken to protect your personal data. A transfer of this data to third parties by the subcontractor is contractually excluded.
If data is transmitted, stored and processed in this context, it is done in accordance with the operator's instructions and as part of an RGPD-compliant mandate.
The servers used in a subcontracting context for operation are located in Switzerland or on EU territory.
The same applies to our suppliers. Their compliance with RGPD is regularly verified.
Changes to personal data
We are committed to keeping your personal data accurate and up-to-date. Therefore, if your personal data changes, please inform us as soon as possible.